testnode: Configure firewalld (when enabled) for NRPE

Signed-off-by: David Galloway <dgallowa@redhat.com>

diff --git a/roles/testnode/tasks/nagios.yml b/roles/testnode/tasks/nagios.yml
index 7a198350132b9ae7691a048a76f7691bc8e49666..259a2298894fa2d3653d957d2f13727bd2cbacab 100644 (file)
--- a/roles/testnode/tasks/nagios.yml
+++ b/roles/testnode/tasks/nagios.yml
@@ -22,6 +22,21 @@
     line: "NRPE_SSL_OPT=\"-n\""
   when: ansible_pkg_mgr == "yum"
 
+- name: Check firewalld status
+  command: systemctl status firewalld
+  register: firewalld
+  ignore_errors: true
+  no_log: true
+  when: ansible_pkg_mgr == "yum"
+
+- name: Open nrpe port if firewalld enabled
+  firewalld:
+    port: 5666/tcp
+    state: enabled
+    permanent: yes
+    immediate: yes
+  when: ansible_pkg_mgr == "yum" and (firewalld is defined and firewalld.stdout.find('running') != -1)
+
 - name: Upload nagios nrpe config.
   template:
     src: nagios/nrpe.cfg